CVE-2019-1723
Description
A vulnerability in the Cisco Common Services Platform Collector (CSPC) could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the affected software has a user account with a default, static password. An attacker could exploit this vulnerability by remotely connecting to the affected system using this account. A successful exploit could allow the attacker to log in to the CSPC using the default account. For Cisco CSPC 2.7.x, Cisco fixed this vulnerability in Release 2.7.4.6. For Cisco CSPC 2.8.x, Cisco fixed this vulnerability in Release 2.8.1.2.
How to fix
- cisco common_services_platform_collector2.7.4.6, 2.8.1.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco common_services_platform_collector | 2.7.2 ≤ v < 2.7.4.6, 2.8.0 ≤ v < 2.8.1.2 | 2.7.4.6, 2.8.1.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.